aggk

Hi again,

I just heard back from WP Engine and they located the IP that matches (part from the last digit) at the same times that Simple History is logging these spam login attempts WP Engine is logging response code 403.
Does that make sense?

Thanks!

Thank you,

I don′t think this is the problem here since this ip is blocked based on it′s country but I will doublecheck…

Hi,

Here are some info from the popup:

Anonymous user from (ip from blocked country) Failed to login with username (existing/real username specified) (incorrect password entered)

Context data
This is potentially useful meta data that a logger has saved.

logger SimpleUserLogger
level warning
message Failed to login with username “{login}” (incorrect password entered)
initiator web_user
context_message_key user_login_failed
server_http_user_agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
_message_key user_login_failed
_xmlrpc_request true

“+67 similar events” (all seem to be occuring at the same time/minute)

According to WP Engine the blocking rules are working.

…does Simple History always list the last digit in ip:s as a zero?

Thanks!

Perfect, thank you!

Ok, thank you for quick reply!

Thank you Ethan,

We sometimes include excerpts from blog posts or other pages, sometimes in the footer or some banner area across the site but these areas doesn′t reflect updates, because of cache.

You mentioned:
“The varnish cache can be dropped using the “Purge Path” option for the entire site…This would be a work around in this case”
I′m not sure I understand how…is this something that an editor-role could perform from a button or is this a setting that could be triggered after any update to the site?

Right now I′m using User Role Manager to add manage_options to the editor -role which allows for the Editor-role to see the “purge all cache” -button. the drawback is that I need to hide a lot of other unnecessary options that comes with this.
…is there any “possible abuse” that we should watch out for with this method?

Thanks!

Thank you Ed!

I updated the live site now and received the same error after updating Events Calendar:
“PHP Fatal error: Uncaught RuntimeException: Error while making ‘admin.notice.php.version’: Class Tribe__Admin__Notice__Php_Version does not exist…”
After that, there were no more errors and I have also tested the site without issues so far.
Any idea what that error is? Can I be sure the update was successful?

Thanks!

Hi again,

I did another test with a new copy to staging.
This time I started by updating Yoast which resulted in the following message in the error log:

PHP Fatal error: Uncaught Error: Class ‘WPSEO_Post_Type’ not found in /wp-content/plugins/wordpress-seo/inc/options/class-wpseo-option-titles.php:252\nStack trace:\n#0 [internal function]: WPSEO_Option_Titles->enrich_defaults(”)\n#1 /wp-includes/class-wp-hook.php(286): call_user_func_array(Array, Array)\n#2 /wp-includes/class-wp-hook.php(310): WP_Hook->apply_filters(NULL, Array)\n#3 /wp-includes/plugin.php(453): WP_Hook->do_action(Array)\n#4 /wp-settings.php(450): do_action(‘init’)\n#5 /wp-config.php(129): require_once(‘/nas/content/li…’)\n#6 /wp-load.php(37): require_once(‘/nas/content/li…’)\n#7 /wp-admin/admin-ajax.php(22): require_once(‘/nas/content/li…’)\n#8 {main}\n thrown in /wp-content/plugins/wordpress-seo/inc/options/class-wpseo-option-titles.php on line 252, referer: /wp-admin/admin-ajax.php?action=tribe_process_async_process_support_test&nonce=83fc125fa7

Then I updated to latest Events Calendar which gave this message:

PHP Fatal error: Uncaught RuntimeException: Error while making ‘admin.notice.php.version’: Class Tribe__Admin__Notice__Php_Version does not exist in /wp-content/plugins/the-events-calendar/common/vendor/lucatume/di52/src/tad/DI52/Container.php:348\nStack trace:\n#0 /wp-content/plugins/the-events-calendar/common/vendor/lucatume/di52/src/tad/DI52/Container.php(281): tad_DI52_Container->resolve(‘admin.notice.ph…’)\n#1 /wp-content/plugins/the-events-calendar/common/src/Tribe/Container.php(176): tad_DI52_Container->make(‘admin.notice.ph…’)\n#2 /wp-content/plugins/the-events-calendar/common/src/Tribe/Main.php(501): tribe(‘admin.notice.ph…’)\n#3 [internal function]: Tribe__Main->tribe_plugins_loaded(”)\n#4 /wp-includes/class-wp-hook.php(286): call_user_func_array(Array, Array)\n#5 /wp-includes/class-wp-hook.php(310): WP_Hook->apply_filters(NULL, Array)\n#6 in /wp-content/plugins/the-events-calendar/common/vendor/lucatume/di52/src/tad/DI52/Container.php on line 348, referer: /wp-admin/admin-ajax.php?action=tribe_process_async_process_support_test&nonce=83fc125fa7

Next I updated all my other plugins and this time there were no more errors. When I test the site I have not noticed any issues or errors.
Does it make any sense to you? Are those errors going to be a problem or would it be safe to update my production site and ignore these?
…can it be related to our upgrade from PHP 5.6 to PHP 7.2?

Thanks!

Hi,

Unfortunately I did not have those errors saved. But I just copied a version to staging trying to reproduce the issue. From what I can tell the errors occur while updating plugins, last time I remember that the errors with referer tribe_process_async_process_support_test was related to Yoast and CPT UI -plugin updates.
I did not see the same errors this time but instead the following:
(I should mention I have not detected any issues with the site other than these errors but as a result I have unfortunately postponed all plugin updates)

This one happened before Event Calendar was updated and it seems to be related to updating the feedzy -plugin:

PHP Fatal error: Uncaught Error: Class ‘ThemeIsle_SDK_Loader’ not found in /wp-content/plugins/feedzy-rss-feeds/vendor/codeinwp/themeisle-sdk/start.php:37\nStack trace:\n#0 wp-content/plugins/feedzy-rss-feeds/vendor/codeinwp/themeisle-sdk/load.php(32): require_once()\n#1 [internal function]: themeisle_sdk_load_latest(”)\n#2 /wp-includes/class-wp-hook.php(286):
call_user_func_array(‘themeisle_sdk_l…’, Array)\n#3 /wp-includes/class-wp-hook.php(310): WP_Hook->apply_filters(NULL, Array)\n#4 /wp-includes/plugin.php(453): WP_Hook->do_action(Array)\n#5 /wp-settings.php(450): do_action(‘init’)\n#6 /wp-config.php(129): require_once(‘/nas/content/li…’)\n#7 /wp-load.php(37): require_once(‘/nas/content/li…’)\n#8 /wp-admin/admin-ajax.php(22): require_once(‘/nas/content/li…’)\n#9 {main}\n thrown in /wp-content/plugins/feedzy-rss-feeds/vendor/codeinwp/themeisle-sdk/start.php on line 37, referer: /wp-admin/admin-ajax.php?action=tribe_process_async_process_support_test&nonce=7842c9b679

I′m not sure but it looks like these came while updating Events Calendar:

PHP Fatal error: Uncaught RuntimeException: Error while making ‘tec.admin.event-meta-box’: Class Tribe__Events__Admin__Event_Meta_Box does not exist in /wp-content/plugins/the-events-calendar/common/vendor/lucatume/di52/src/tad/DI52/Container.php:348\nStack trace:\n#0 /wp-content/plugins/the-events-calendar/common/vendor/lucatume/di52/src/tad/DI52/Container.php(281):
tad_DI52_Container->resolve(‘tec.admin.event…’)\n#1 /wp-content/plugins/the-events-calendar/common/src/Tribe/Container.php(176): tad_DI52_Container->make(‘tec.admin.event…’)\n#2 /wp-content/plugins/the-events-calendar/src/Tribe/Main.php(787): tribe(‘tec.admin.event…’)\n#3 [internal function]: Tribe__Events__Main->init(”)\n#4 /wp-includes/class-wp-hook.php(286):
call_user_func_array(Array, Array)\n#5 /wp-includes/class-wp-hook.php(310): WP_Hook->apply_filters(NULL, Array)\n#6 /wp-inclu in /wp-content/plugins/the-events-calendar/common/vendor/lucatume/di52/src/tad/DI52/Container.php on line 348, referer: /wp-admin/admin-ajax.php?action=tribe_process_async_process_support_test&nonce=7842c9b679

PHP Fatal error: Uncaught RuntimeException: Error while making ‘admin.notice.php.version’: Class Tribe__Admin__Notice__Php_Version does not exist in /wp-content/plugins/the-events-calendar/common/vendor/lucatume/di52/src/tad/DI52/Container.php:348\nStack trace:\n#0 /wp-content/plugins/the-events-calendar/common/vendor/lucatume/di52/src/tad/DI52/Container.php(281):
tad_DI52_Container->resolve(‘admin.notice.ph…’)\n#1 /wp-content/plugins/the-events-calendar/common/src/Tribe/Container.php(176): tad_DI52_Container->make(‘admin.notice.ph…’)\n#2 /wp-content/plugins/the-events-calendar/common/src/Tribe/Main.php(501): tribe(‘admin.notice.ph…’)\n#3 [internal function]: Tribe__Main->tribe_plugins_loaded(”)\n#4 /wp-includes/class-wp-hook.php
(286): call_user_func_array(Array, Array)\n#5 /wp-includes/class-wp-hook.php(310): WP_Hook->apply_filters(NULL, Array)\n#6 /wp-content/plugins/the-events-
calendar/common/vendor/lucatume/di52/src/tad/DI52/Container.php on line 348, referer: /wp-admin/admin-ajax.php?action=tribe_process_async_process_support_test&nonce=7842c9b679

We are hosted at WP Engine where I have just updated from PHP 5.6 to 7.2

Thanks!

Thank you Slava, I really appritiate you taking time to explain! I guess really what I like to know is, will ”delivery chances” be equal if using the same SMTP account, through WP Mail SMTP on some contact form vs sending through a local client like Outlook?

Thanks!

Thank you Slava,

But will the fact that the email was generated from a Web hosting server different from the SMTP server play any part? Or will the recipient only recognize that it was sent from the SMTP server (same way as if it was sent from a desktop client with SMTP server configured) ?

(I realize that there are other factors to consider such as content but this is not what I′m wondering here)

Thanks!

Thank you yehudah,

We are using a “traditional” SMTP account…not Google, Mailgun, Sendgrid or other API.
Guess I should contact WP Engine about this
https://wpengine.com/support/using-3rd-party-email-provider-send-mail-wordpress/
…”Only Google Apps may be used on ports 465 and 587″

Thanks!

No, just a “normal” SMTP account.

Thank you Ed,

But is there any way to remove that message through a codesnippet?
Everything is working well, we deliberately use this permalink for a page and display the Events Calendar there through our theme.

Thanks!

Thank you Slava!

But are there any big security concerns that would motivate using Mailgun/SendGrid/Gmail over “Other SMTP”?

Yes, Mailgun/Sendgrid etc have generous free mailing limits, but only when on shared ip:s

The way I see it, using our existing “Other SMTP” would be the best alternative.
But to be honest it′s a little intimidating printing the password, is it a safe/recommended way? (we are on WP Engine that I belive has great security in place)

Thanks!